Care to share...???
Didn't they say it already? They basically think that the OpenSSL API is convoluted. That's my understanding of the comment above, at least.
Unnecessarily complicated APIs are a security code smell precisely because they help hide bugs, leaky abstractions, insecure state, and other exploitable issues.
Did I say they weren't? Not sure why I'm being downvoted here.
Op did immediately above you i.e.: "nothing to do with malice or exploitability"
and when asked to explain you responded with: "Didn't they say it already?"
Which any reader can verify they have not at the time of 1:42pm EST Oct 23 2026.